Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-init-flare-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd269a356ae3f884d25ed3afd367540fa7f952b3a55f8746d6c3a7ab5ef34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-axios-node-sass-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7692cbc2f8639f5c959ed7f4b387d90952e4f3c2f0d55aed20eef5917ab13d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111819

Malicious code in leda-sequelize-pm2-sagitta npm...

Malicious code in rehype-astro-pm2-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930d442b4964528252da778f93881462ca24cd58ed6925e237ae9b5b531fe189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-mira-pm2-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48dfb675efc87f46b8c1732d0a186062453d40de5752664af00e8082b7ca5d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124085

Malicious code in ophiuchus-pm2-framework-juno npm...

EUVD-2025-123622

Malicious code in pm2-halley-vega-eclipse npm...

EUVD-2025-124231

Malicious code in npm-server-mui-pm2 npm...

Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142533 Malicious code in flare-pm2-capella-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146290 Malicious code in pm2-airbnb-rollup-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00812a5a5bb55e9fbd4f7ff184dd941873e86494f26b6a910d99427900e51523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144273 Malicious code in leda-hydra-pm2-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56e20b55b72b350fc2e6d9234e19db1c5dd0f9a3428ab870886fa15a9efa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143455 Malicious code in hydra-sails-jekyll-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142421 Malicious code in farout-pm2-magellan-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f979d60e9f0321430741732ee1d0db5bcbeb4f5bea123aecf96de18fd502645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143028 Malicious code in gravity-pm2-cosmiconfig-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143195 Malicious code in hapi-pm2-event-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859efae1d683341cf881810b9ed0373769cb7268a4055824235d2a45b7903f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145609 Malicious code in non-blocking-halley-pm2-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b550f4c21432c547db7803570839488aad6e6d7d907e29bf2f2bca16cbeed09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148236 Malicious code in sqlite-pm2-meteor-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd3c5f43018356c9e82eaca0f0f7ba7363ea55334dba08dfc09a72bdaebb0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146294 Malicious code in pm2-convict-lint-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3599bc1a7467d1187d95c87d1bf5167564ec62aaf91e11c17980fd31d2f03c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...